Example Of Using Auto Policy - NETGEAR DGN2200v1 User Manual

This setting applies to both IKE and IPSec SAs. When configuring the remote endpoint to
match this setting, you might have to specify the key group used. For this device, the key
group is the same as the DH Group setting in the IKE section.

Example of Using Auto Policy

IP: 192.168.0.1
14.15.16.17
Gateway A
Figure 22. Auto Policy
The following settings are assumed for this example:.
Table 7. Gateway-to-Gateway VPN Tunnel Configuration Worksheet
Parameter
Connection Name
Pre-Shared Key
Secure Association
Perfect Forward secrecy
Encryption Protocol
Authentication Protocol
Diffie-Hellman (DH) Group
Key Life in seconds
IKE Life Time in seconds
VPN Endpoint
Gateway_A
Gateway_B
To use Auto Policy:
Set the LAN IPs on each modem router to different subnets and configure each correctly
1.
for the Internet.
122 | Chapter 8. Virtual Private Networking
VPN Tunnel
Value to Be Entered Field Selection
28800 (8 hours)
3600 (1 hour)
Local IPSecID LAN IP Address
GW_A 192.168.0.1
GW_B 192.168.3.1
N300 Wireless ADSL2+ Modem Router DGN2200
Internet
GtoG
12345678
N/A Main Mode
N/A Enabled
N/A DES
N/A MD5
N/A Group 1
Subnet Mask
255.255.255.0
255.255.255.0
IP:192.168.3.1
22.23.24.25
Gateway B
N/A
N/A
Manual Keys
Disabled
3DES
SHA-1
Group 2
N/A
N/A
FQDN or Gateway
IP (WAN IP Address
14.15.16.17
22.23.24.25